have you checked this document

http://www.symantec.com/business/support/index?pag...

Hi

Try to:

1.Disable the legacy upload option

1. From the Symantec Endpoint Protection Manager Console page, under "Security Status", click Preferences
2. Click Logs and Reports
3. Uncheck the radio button under "Legacy Support", Upload Symantec AntiVirus version 10.x log files
4. Restart IIS

1. From the Symantec Endpoint Protection Manager console page, under "Security Status", click Preferences
2. Click Logs and Reports
3. Check the radio button under "Legacy Support", Upload Symantec AntiVirus version 10.x log files
4. Restart IIS 
5.  

Hi KK,

I have encountered something similar myself.  There is a Perl module needed so that SAVFL can function.  Here's an article on how to fix the issue in Ubuntu: it will likely be similar in your distro.

Symantec AntiVirus for Linux Reporter Fails to Forward Events, Error "Undefined subroutine.... line 128"
Article:TECH189759   |  Created: 2012-05-25   |  Updated: 2012-05-25   | 
Article URL http://www.symantec.com/docs/TECH189759 
 

Solution

Downloading and installing the libwww-perl module package enabled an affected Ubuntu LinuxMint 13 computer to correctly forward logs to the organization's SEPM.

The readme.txt for SAVFL Reporter mentions another file as well:

 

 4. Make sure that Perl 5.8.0 or later and the related Perl module package (for example, perl-libwww-perl for RedHat/SuSe Linux) are installed on the client.

If this module is missing, SAVFL will not be able to function correctly.
 

Hi KK,

Just a ping to check if you managed to get this working correctly.  The thread is still marked "needs solution."

With best regards,

Hello Kumar,

Kindly make sure that Perl 5.8.0 or later and the related Perl module package (for example, perl-libwww-perl for RedHat/SuSe Linux).

Regards,

Sagar D. Kanase.
Technical Support Analyst.